UniShift LLC ("Company," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use PathwayIQ, including our website, applications, and AI-powered document analysis services (collectively, the "Service").
We encourage you to read this Privacy Policy carefully before using the Service. By accessing or using PathwayIQ, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.
1. Information We Collect
We collect information in several ways to provide, maintain, and improve our Service. Understanding what information we collect helps you make informed decisions about your use of PathwayIQ.
1.1 Information You Provide Directly
When you create an account, you provide us with basic registration information including your name, email address, and password. We store your password in encrypted form and never have access to your plaintext password. If you choose to add additional profile information, we collect and store that as well.
The core functionality of PathwayIQ involves analyzing documents you upload. When you submit documents for analysis, we collect and process the content of those documents, including any text, images, and metadata they contain. These documents may include personal information about you or third parties, such as names, addresses, employment history, educational credentials, and other information relevant to immigration applications. You are responsible for ensuring you have the right to upload any documents containing information about third parties.
When you communicate with us through customer support channels, feedback forms, or other means, we collect the content of those communications along with any contact information you provide. If you subscribe to a paid plan, we collect billing information including your billing address and payment method details, though payment processing is handled by third-party payment processors who maintain their own privacy policies.
1.2 Information Collected Automatically
When you access the Service, our systems automatically collect certain technical information about your device and usage patterns. This includes your Internet Protocol (IP) address, which provides general location information and helps us detect and prevent fraudulent activity. We also collect information about your browser type and version, operating system, device identifiers, and the pages you visit within our Service.
We use cookies and similar tracking technologies to maintain your session, remember your preferences, and gather analytics data. Session cookies are essential for authentication and expire when you close your browser. Preference cookies remember your settings and choices across visits. Analytics cookies help us understand how users interact with our Service so we can improve the user experience.
1.3 Information from Third Parties
If you choose to sign in using Google authentication, we receive certain information from Google including your name, email address, and profile picture. We use this information solely to create and manage your account. We do not receive or store your Google password, and Google's privacy policy governs how Google handles your information.
2. How We Use Your Information
We use the information we collect for specific, legitimate purposes related to providing and improving our Service. We do not use your information in ways that are incompatible with the purposes described in this section.
2.1 Providing and Maintaining the Service
The primary purpose for which we collect your information is to provide PathwayIQ's document analysis functionality. When you upload documents, our AI systems process the content to generate evaluations and reports. We store your documents and analysis results so you can access them across sessions and devices. Your account information enables us to authenticate you, maintain your preferences, and provide personalized features.
2.2 Improving and Developing the Service
We analyze aggregated, de-identified usage patterns to understand how users interact with PathwayIQ. This analysis helps us identify areas for improvement, develop new features, and optimize the user experience. We may use aggregated, anonymized data derived from document analysis to improve the accuracy and capabilities of our AI models. However, we do not share your documents or personal information with third parties for the purpose of training AI models. Our AI service providers are contractually bound to process your data solely for the purpose of providing analysis to you and are prohibited from using your data to improve or train their models.
2.3 Communications
We use your email address to send transactional communications that are essential to the Service, such as account confirmations, password reset links, and important service announcements. With your consent, we may also send marketing communications about new features, promotions, or other information we believe may interest you. You can opt out of marketing communications at any time, but you cannot opt out of essential transactional communications while maintaining an active account.
2.4 Security and Legal Compliance
We use information about your account activity and device characteristics to detect and prevent fraud, abuse, and security threats. This includes monitoring for unauthorized access attempts, suspicious usage patterns, and potential violations of our Terms of Service. We may also process your information as necessary to comply with applicable laws, regulations, legal processes, or governmental requests.
3. How We Share Your Information
We are committed to protecting your privacy and do not sell your personal information to third parties. We share your information only in the limited circumstances described in this section.
3.1 Service Providers
We engage trusted third-party companies to perform services on our behalf, such as cloud hosting, data storage, authentication, payment processing, and analytics. These service providers have access to your information only to the extent necessary to perform their specific functions and are contractually obligated to protect your information and use it only for the purposes we specify. They are prohibited from using your information for their own purposes or sharing it with others.
We carefully select service providers that maintain robust security practices and comply with applicable data protection laws. All service providers are bound by confidentiality agreements and data processing agreements that require them to implement appropriate technical and organizational measures to protect your information.
AI Processing. We use third-party artificial intelligence services to analyze your documents and generate evaluations. Our AI service providers are contractually prohibited from using your prompts, documents, or generated responses to train or improve their AI models. Your inputs are treated as confidential and processed solely to provide the Service to you.
Our AI service providers may retain prompts and responses for a limited period (typically up to 60 days) solely for abuse detection, security monitoring, and legal compliance purposes. This data is not used for model training.
3.2 Legal Requirements and Protection of Rights
We may disclose your information when we believe in good faith that such disclosure is necessary to comply with applicable laws, regulations, legal processes, or governmental requests. This includes responding to court orders, subpoenas, search warrants, or other lawful requests from public authorities, including requests made for national security or law enforcement purposes.
We may also disclose your information when we believe it is necessary to protect the rights, property, or safety of UniShift LLC, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction, and enforcing our Terms of Service and other agreements.
3.3 Business Transfers
If UniShift LLC is involved in a merger, acquisition, asset sale, bankruptcy proceeding, or other business transaction, your information may be transferred as part of that transaction. In such cases, we will provide notice before your information is transferred and becomes subject to a different privacy policy. We will take reasonable steps to ensure that any successor entity honors the commitments made in this Privacy Policy or provides you with notice and choice regarding any material changes.
3.4 With Your Consent
We may share your information with third parties when you explicitly consent to such sharing. For example, if you choose to integrate PathwayIQ with other services or applications, we will share information as necessary to enable the integration you requested.
4. Data Security
We implement comprehensive security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security program includes both technical and organizational safeguards appropriate to the sensitivity of the information we process.
4.1 Technical Safeguards
All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) to prevent interception during transit. Data stored on our servers is encrypted at rest using industry-standard encryption algorithms. We implement strict access controls that limit access to personal information to employees and contractors who need it to perform their job functions.
Our authentication system employs secure password hashing, session management, and optional multi-factor authentication to protect your account from unauthorized access. We conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential security weaknesses.
4.2 Organizational Safeguards
All employees and contractors who have access to personal information receive training on data protection and security best practices. Access to personal information is granted on a need-to-know basis and is regularly reviewed and audited. We maintain incident response procedures to quickly detect, respond to, and recover from security incidents.
4.3 Your Responsibilities
While we implement robust security measures, the security of your account also depends on your actions. You are responsible for maintaining the confidentiality of your login credentials and should use a strong, unique password that you do not use for other services. You should log out of your account when using shared or public devices and notify us immediately if you suspect any unauthorized access to your account.
Despite our efforts, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. We will notify you and any applicable regulator of a breach where we are legally required to do so.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period for different types of information varies based on the nature of the information and the purposes for which it is processed.
Your account information, including your name, email address, and profile information, is retained for as long as your account remains active and for a reasonable period thereafter to allow you to reactivate your account if desired. If you request deletion of your account, we will delete or anonymize your account information within thirty (30) days, except where retention is required by law.
Documents you upload and the analysis results we generate are retained while your account is active. You may delete individual documents at any time through the Service interface. When you delete a document, we remove it from our active systems, though backup copies may persist for a limited period as part of our disaster recovery procedures.
Usage data and analytics information is retained in aggregated, anonymized form for longer periods to support our ongoing efforts to improve the Service. This aggregated data cannot be used to identify you personally.
6. Your Rights and Choices
We believe you should have control over your personal information. Depending on your location, you may have certain rights regarding your personal information, and we have established procedures to help you exercise those rights.
6.1 Access and Portability
You have the right to request access to the personal information we hold about you. Upon verification of your identity, we will provide you with a copy of your personal information in a commonly used, machine-readable format. You can also access much of your information directly through your account settings.
6.2 Correction and Update
You can update or correct most of your account information at any time through the Service interface. If you believe any information we hold about you is inaccurate or incomplete, you may request that we correct it. We will respond to such requests within a reasonable timeframe.
6.3 Deletion
You may request deletion of your personal information by contacting us or using the account deletion feature in the Service. Upon receiving a valid deletion request, we will delete or anonymize your personal information, except where we are required or permitted to retain certain information by law. Please note that deletion of your information will result in the permanent loss of your account and all associated data.
6.4 Marketing Preferences
You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email, adjusting your communication preferences in your account settings, or contacting us directly. Please note that even if you opt out of marketing communications, we may still send you transactional communications related to your account and use of the Service.
7. California Privacy Rights
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) regarding your personal information. This section describes those rights and explains how you can exercise them.
7.1 Right to Know and Access
You have the right to request that we disclose the categories of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purposes for collecting the information, and the categories of third parties with whom we share the information. You also have the right to request access to the specific pieces of personal information we have collected about you.
7.2 Right to Delete
You have the right to request that we delete the personal information we have collected about you, subject to certain exceptions. We may deny your deletion request if retaining the information is necessary for us to complete the transaction for which we collected the information, provide a good or service you requested, perform a contract with you, detect security incidents, comply with a legal obligation, or make other internal and lawful uses of the information that are compatible with the context in which you provided it.
7.3 Right to Correct
You have the right to request that we correct inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes of the processing.
7.4 Right to Opt-Out of Sale or Sharing
We do not sell your personal information as that term is defined under California law. We also do not share your personal information for cross-context behavioral advertising purposes. Therefore, we do not offer an opt-out mechanism for the sale or sharing of personal information because we do not engage in these activities.
7.5 Right to Non-Discrimination
We will not discriminate against you for exercising any of your California privacy rights. We will not deny you goods or services, charge you different prices or rates, provide you a different level or quality of goods or services, or suggest that you will receive a different price or rate or different level or quality of goods or services for exercising your rights.
7.6 Exercising Your Rights
To exercise your California privacy rights, please contact us at support@thepathwayiq.ai. We will verify your identity before processing your request by matching information you provide with information we have on file. You may designate an authorized agent to make a request on your behalf by providing the agent with written permission signed by you.
8. Children's Privacy
PathwayIQ is not intended for use by individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at support@thepathwayiq.ai. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible.
9. International Data Transfers
PathwayIQ is operated by UniShift LLC, a company based in the United States. Your documents and personal data are stored on secure servers in the United States operated by Amazon Web Services (AWS). If you access the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your data is transferred to the United States pursuant to Standard Contractual Clauses approved by the European Commission, which provide appropriate safeguards for such transfers. AWS maintains comprehensive security certifications including SOC 2 and ISO 27001.
By using PathwayIQ, you consent to the transfer of your information to the United States and acknowledge that your information will be subject to United States law. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this Privacy Policy, we will notify you by posting the updated policy on the Service with a new effective date and, where required by law, by sending you an email notification.
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to any changes, you should discontinue use of the Service and delete your account.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, we encourage you to contact us. We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy.
UniShift LLC
Poway, California
For privacy related general inquiries: support@thepathwayiq.ai
For support: support@thepathwayiq.com
By using PathwayIQ, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.